If someone just asked you for money, a login code, or remote access, stop before you send anything. If the money already left, skip the rest of that conversation and call the bank, card issuer, payment app, exchange, or gift card company through a number you already trust.
“Explained scams” isn’t a legal category or a refund program. It usually means taking the scheme apart: the hook, the credibility act, the pressure, the first request, the larger ask, and the disappearance. The story can be a bank alert, a job, a romance, a prize, or an investment dashboard. What actually changes your next step is how you paid and whether the transfer is still pending.
This guidance is for U.S. consumers. Provider procedures, account agreements, and deadlines vary. Reporting a scam does not guarantee a refund.
How most scams work
The details change. The sequence often doesn’t.
- The hook: An unexpected call, text, email, ad, job offer, prize notice, investment pitch, or personal message.
- The credibility step: A familiar logo, spoofed caller ID, polished website, fake profile, copied employee name, or details pulled from social media.
- The pressure step: Act now, keep it secret, or don’t check with anyone else.
- The small request: A verification code, a small payment, a personal detail, a “test” task, or an initial deposit.
- The escalation: After you comply, the ask grows: more fees, more transfers, account access, or identity documents.
- The cutoff: You’re blocked, the fake account vanishes, nobody answers, or you’re told one more payment will release your money.
- The follow-on scam: A new contact offers to recover the loss for an upfront fee. That can be another scam.
A polished message can still be fraudulent. Spelling mistakes are only one clue. Pay more attention to the request, the pressure, and where the money is supposed to go.
Warning signs that deserve a pause
One red flag doesn’t prove fraud. Money or sensitive information plus pressure should stop the transaction until you verify it yourself.
| Warning sign | What it may indicate | Safer response |
|---|---|---|
| An unexpected call, message, or investment offer | The scammer wants to start the relationship on their terms | Don’t click, reply, or give information before checking the sender |
| Urgency or threats | Pressure is being used to prevent careful checking | End the conversation and contact the organization through a known channel |
| A demand for secrecy | A bank employee, friend, or relative might puncture the story | Talk the request over with someone you trust |
| Payment by cryptocurrency, gift card, cash, or wire | These payments can be hard to recover | Stop and verify the recipient before sending anything |
| Guaranteed profits or unusually high returns | The pitch may be designed to trigger greed or fear of missing out | Verify the person, firm, and investment independently |
| A request for a password, one-time code, or seed phrase | Someone may be trying to take over an account or wallet | Never share credentials or security codes with an unsolicited contact |
| A request to install remote-access software | Someone may want control of your device or accounts | Refuse and contact the supposed organization yourself |
| A move from a public platform to private messaging | The scammer may be trying to avoid moderation | Don’t treat a private chat as proof of identity |
| A small payment followed by new fees | The first payment may be a test or a sunk-cost trap | Stop paying and review the transaction with your provider |
| A website, phone number, or email supplied by the contact | Those details may be controlled by the scammer | Find the official website or number separately |
Common scam types and how they operate
Impersonation and phishing
A phishing message may claim your account was compromised, a payment failed, or a delivery is waiting. It sends you to a login page or asks for a verification code.
Losing a password isn’t the only risk. If you hand over a one-time code, approve a login, or install software, the scammer may get in even when you use multifactor authentication.
Open the company’s official app or type its web address yourself. Don’t use a link or phone number from the suspicious message. A real bank employee, government representative, or support agent should not need a one-time security code from someone who contacted you out of the blue.
Investment and cryptocurrency scams
The FTC’s cryptocurrency scam guidance notes that cryptocurrency can be both the investment and the payment. A scammer may promise profits, show you a convincing dashboard, and then tell you to buy or send crypto to a wallet.
Watch for:
- An unsolicited “investment manager” or online expert
- Guaranteed or unusually consistent returns
- A website showing profits you can’t independently verify
- Pressure to move money to a new wallet or exchange
- A fee, tax, or deposit required before you can withdraw
- Instructions to keep the investment secret
- Requests for your wallet password, private key, or recovery phrase
A displayed balance isn’t proof that funds are real or withdrawable. Don’t send more cryptocurrency to unlock an account or recover an earlier payment.
If you sent crypto, save the exchange or ATM details, wallet address, transaction hash, amount, and time. The IC3 cryptocurrency information page explains how transaction hashes and wallet addresses help identify transfers. A blockchain transaction may be difficult or impossible to reverse, but you should still contact the exchange or service used to send it immediately.
Romance scams
Romance scammers build trust before asking for money. The excuse may be a medical emergency, a travel problem, a legal issue, an overseas job, or an investment. Some avoid meeting in person or keep canceling video calls. A convincing video call still doesn’t make a money request legitimate.
Don’t send money, gift cards, account access, or cryptocurrency to someone you know only online. If an emergency comes up, verify it through an independent source, not through friends, doctors, or contacts supplied in the same conversation.
Job and task scams
A fake recruiter may offer easy online work, then ask you to pay for training, equipment, account activation, or cryptocurrency “recharges.” Some schemes show small earnings first, then demand a larger payment before you can withdraw.
You should never have to pay money to receive wages. Confirm the employer through a website or phone number you found independently. Don’t deposit a check and send part of the funds back before your bank confirms the check has cleared.
Online shopping scams
Fake stores often use copied product photos, steep discounts, limited-time countdowns, and recently created social ads. The site may take payment and ship nothing, send a different product, or collect card and account details.
Before you buy, check the seller’s contact information, return terms, independent reputation, and payment options. Save the order confirmation and delivery promises. A credit card may give you a dispute process. That isn’t an automatic refund.
Prize, charity, and emergency scams
A real prize doesn’t become legitimate because the caller knows your name. Taxes, processing fees, gift cards, or cryptocurrency demanded before you receive winnings are strong warning signs.
Fraudulent charity appeals often appear after a disaster or major news event. Find the organization yourself, verify the exact name and website, and donate through its official channel rather than a link in an unsolicited message.
How to check a request before paying
Use this process whenever someone asks for money, access, or sensitive information.
- Pause the conversation. Don’t let a countdown, a threat, a romantic emergency, or a claimed account problem make the decision.
- Use an independent contact method. Find the organization’s website, phone number, or app yourself. Don’t rely on the details in the message.
- Ask a second person. A trusted friend, relative, bank employee, or colleague may catch an inconsistency you missed.
- Check the recipient, not just the story. Confirm the name, account, wallet address, invoice, and payment instructions through a separate channel.
- Refuse unusual payment methods. Gift cards, cryptocurrency, cash, and wire transfers deserve extra scrutiny.
- Protect your accounts. Use unique passwords and multifactor authentication. Never share passwords, one-time codes, recovery phrases, or remote-access permissions.
- Keep the evidence. Save the message, profile, website address, receipt, and payment details before blocking the contact.
Multifactor authentication can help prevent account takeover. It can’t reverse a payment you approve after being deceived.
What to do after sending money
Act quickly, even if you feel embarrassed or don’t have every detail. Early contact may give a provider more options. No provider can promise recovery.
1. Stop communicating and don’t send more
Don’t pay a second amount to “fix,” “reverse,” or “release” the first payment. Save the evidence, then block the scammer. Be careful about deleting messages that a bank or investigator may need.
2. Contact the payment provider
Use the phone number on your card, a statement, or the provider’s official app. Never use a number supplied by the scammer.
| Payment method | Contact first | What to ask or provide |
|---|---|---|
| Credit card | Card issuer | Ask about the issuer’s dispute process and deadline. Provide the merchant, amount, date, receipts, and messages |
| Debit card or ACH transfer | Bank or credit union | Report the fraud and ask whether the payment can be stopped, returned, or reviewed |
| Wire transfer | Sending bank’s wire or fraud department | Request a recall immediately and provide the recipient details, amount, and time |
| Payment app or remittance service | The app or service and, when relevant, the linked bank | Report the transaction and ask whether it is pending, frozen, or eligible for reversal |
| Cryptocurrency | The exchange, ATM operator, or service used to send it | Provide the transaction hash, wallet address, destination, amount, and time if available |
| Gift card | Gift card issuer | Report the scam with the card number and receipt. Don’t send the code to anyone else |
| Fake online order | Seller, marketplace, and payment provider | Save the order, shipping information, cancellation request, and proof that the goods were not delivered |
A completed wire or cryptocurrency transfer may be difficult to reverse. Speed still matters, and contacting the provider is still worth doing.
3. Describe authorization accurately
Tell the provider exactly what happened. An unauthorized transaction is one you didn’t initiate or approve. A scam-induced payment may be one you personally approved because the scammer lied to you. Those situations can be handled differently.
Don’t describe an authorized payment as unauthorized. Explain the deception, the instructions you received, and what you believed you were paying for. Ask which review or dispute process applies.
4. Secure your accounts and identity
Change passwords that were exposed or reused, starting with email. Sign out of other sessions, review account recovery settings, and enable multifactor authentication.
If you installed remote-access software, disconnect the device from the internet and get help from a trusted technician before entering new passwords. Contact your bank if account credentials, card details, or identity documents were exposed. Watch statements and account alerts for more activity.
5. Preserve and organize evidence
Write a simple timeline:
- The first contact and every follow-up
- Names, usernames, phone numbers, email addresses, and website addresses
- Payment dates, amounts, recipients, and transaction or confirmation numbers
- Wallet addresses and transaction hashes for cryptocurrency
- Screenshots, emails, receipts, invoices, shipping records, and bank notices
- The names of providers you contacted and each case number
Don’t edit screenshots or forward suspicious links to other people. Store the original messages securely.
6. Report the scam
U.S. consumers can use the FTC’s official consumer guidance and reporting instructions. Internet-enabled crime and cryptocurrency theft can also be reported to the Internet Crime Complaint Center. IC3 says it shares complaint information with law-enforcement partners, but a report may not receive a direct response.
Report threats, stalking, identity misuse, or substantial theft to local law enforcement as appropriate. Keep copies of every report. A report supports investigation. It isn’t the same as a refund request, and it doesn’t guarantee that money will be recovered.
What actually controls your recovery options
The word “scam” doesn’t decide the outcome. These factors usually do:
- The payment rail: Card, bank transfer, wire, payment app, gift card, cash, and cryptocurrency follow different procedures.
- Whether the payment is pending or completed: A provider may have more options before settlement.
- Whether you authorized it: The provider may distinguish an account takeover from a payment you approved after deception.
- How quickly you report it: Delays can reduce available options.
- Your documentation: Receipts, messages, transaction IDs, and a clear timeline help the review.
- The provider’s rules and applicable law: Deadlines and evidence requirements vary.
A merchant’s refund policy isn’t the same as a card dispute. A police, FTC, or IC3 report doesn’t automatically reverse a payment. There is also no universal “60-day” recovery deadline that applies to every scam or payment method. Ask the provider for the specific deadline that governs your transaction.
Common questions
Can a cryptocurrency payment be reversed?
Usually, cryptocurrency transfers are difficult to reverse once confirmed. Contact the exchange, ATM operator, or service used to send the funds immediately and provide the transaction details. Also report internet-enabled or crypto-related crime to IC3. Don’t pay anyone who guarantees recovery for an upfront fee.
What if I only gave the scammer personal information?
Secure the affected accounts, change reused passwords, enable multifactor authentication, and contact the relevant bank or service. If you shared identity documents or account credentials, tell those institutions what was exposed and monitor for follow-up activity.
What if I approved the payment myself?
Report it anyway and explain that you were deceived. The provider may use a different process from an unauthorized-transaction claim, but accurate information gives it the best basis to review what happened.
How long do I have to dispute a scam payment?
There isn’t one deadline for every payment type. Card issuers, banks, payment apps, remittance companies, and exchanges may have different procedures. Contact the provider immediately and ask for the applicable deadline in writing.
Is a money-recovery service safe?
Be skeptical of anyone who contacts you unexpectedly, claims special access to investigators or blockchain records, or demands an upfront fee. A second payment won’t automatically recover the first. Verify any legal or investigative service independently before sharing information or paying.
If a scam has already happened, write down the payment method, date, amount, recipient, and transaction number, then call the provider through a verified contact channel today.